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SOLO nOB QP SHE JAP13ESE "BED MACHUDS" 



The earliest flora of cipher 



used tor the Japanese 



Pi plnaatic Cc— ml ce tiflns Bet produscd cipher text caadCOraod 



to the telegraphic regulations then In effect; that is, each five- 



letter group contained a atnlaara of too vowels, and was p rono u nceable 



within the «—»«*« g of the regulations. this fleet possibly was the «*- 

A-''—-' 

detersal.nl eg factor sfei^h cau s ed the Japanese to adopt the type of 



CV- a> Ca^t*.*^^*^*.*.* «. <v*» * 



cipher Machine used by them 



. She orthographical construction 



of the Japanese Bonaji text allowed them to note consonant- for- 

-T~i 



consonant and vowel- for' vowel substitutions on thelr^ plain text 



to produce cipher text which conforaed to the above-aentloned 



regulations* It is interesting to note that none of the lan gu a g es 



of the other great powers of the world p os se ss ed this characteristic 



She first cipher Messages produced by the cipher a ac hlne 

*Ww I'k&S’ e ^ 

encountered In 1933 la March. A Sals necblae was used spo radi c al ly 

U**A-*-t*-h-*> u +4>*. C* f * U J ‘ *** ^ 

Z' during this peer and only a very few Intercepts were Obtained fron 
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the Pipit— ittr circuits. Zb the Japanese controlled Fur Eastern 
net* h o ww , several assesses awn picked up la the letter port 
of the poor* All thro aessogHi exhibited the characteristics of 



A f ft _• * w 
• $k- ast'j **->•*-. , t-A-,. 



In March 193b the wtemot characteristics of the cipher text 

Kul V* t «j Cajvu^w-* >t*> S'" 

and It iKurepparent that the Japanese had departed free 
the above-nentiorcd. type of substitution sad had Indiscriminately 



Biased the vowel and consonant substitutions; that la, a vowel or 



consonant could he represented either by a vowel or a consonant. 

JLcOLw 



All cipher 



terlstica. 



from this date on 



She saoont of cipher 

iq34- 



text transmitted par day gradually 



and 






Mb the Bsehlne 



and Its 
Incident it 



on a single day os* not an 



occ urrenc e in 



■ ar**' 
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tte Per Eastern Diplomatic Set. 



Our first Bsrions effort at eolation begun in Octob er 1936* 



Sgr this ties considerable traffic had seemanlated and it sac acted 



that a great 



being seat in shat vs called far 



leek of a better 



System." (this 



message*) Extracts from these files shea subjected to diagnostic 
•tniy indicated the following: 

1 . The text was definitely a fans of cipher. 

2 . the nature of the substitution was each that repetitions 



were permitted to occur. 

3. A radical change took piece on the first, eleventh, 
and twenty-first of each sooth. 
k. fie keying element produced a very long cycle thick at 
that time ap pe a re d to be on an indeterminate length. 
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MttblUted, it ms deemed to 
to go tank to tbs earlier type of traffic and 

—srtM | a found 

■elected bed been eexxt ndar date of Btcwfcor 21, 1933 cad 
■lightly over two thousend characters la length* The first study 
ante an this sassage ms an effort to detenaiae if these was say 
relation aaoog tbs vowels, sad if a sequence could be famed ty 
■seas of a statistical study of sequent letters in alternate 
positions in the cipher text* Tor this purpose a tabulation of 
the vowels following each of the vowels at the interval 1*3 



sate. The results of this study are given herewith. 

3.4. kclu- 
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The test —lection of tetters from the above table produced 
the ee^usaoe 

After these three tetters were selected, the regaining three tetters 
coeiMrt, to fit test In the following anwag—eat 




Shis left the paroblea of i—nlgra-ting the two foregoing aeqpeaeet 
to fom cm of etc tetters* The c ha ra c teristics of the 

Bc—ijl text ere such that long sounds la Japa n ese ere famed by 
doubling the vowels an which the sound is based. For exsapte, 

J&5 and B&S? ETOTSI becoae JOCBOO sad BOQKXQO KXOOXEX la telegraphic 
plain text* A tabulation, therefore, of the —quest vowels (interval 
1-2) occurring la the Seasage Should divulge which tetters were 
sequent la the vowel s eqpe n e c of the cipher sy stea* The results 



A * 0 . Z 
35 35 



of such a tabulation fbltews.s 
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Qua each of the highest of the foregoing tribulations ■ 
build up a chela of letters the following sequence result^: 
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A 

9 



U 

9 



0 T 
13 14 



X 

8 



B 

8 



Zt Kill be noted that this mntrt-Hmg sequence corroborates the 4$ 
o oequaaeaebullt up firoa the iunrlfiis table based on the interval 1-3. 

\ Q JU n A alX i >D 1 1 

tt* feet that a sequence could be derived firoa the Intervals 
1-2 end 1*3 at Ben coupled vith the feet that repetitions o c cu rr ed 
la the cipher text itself led us to believe that the fundamental 
nature of the cipher machine used «ae soonhat similar to that 
used In the Kxyhm cipher machine, but the stepping Interval of the 
alphabetic segaeaoe had to bo acre or less regular, even though It 
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produced a long keying period* She obvious step «u t h erefore to 



mi ettnpt to zecoostzuct tli cwRusst 



I n corpor at ed 



In the wcblas fey 



of the 



•art of statistical tabulation* 






this orthod wo tried, but doe to the scattering of the coincidences 



over t wenty letters as capered to six 



OJf* 

it 



to p ro du ce a sequence which coaid fee used with an y 

4* ^ **** f LM ^z u ' J uXZ> ~ 
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that the enangewut of the letters wa c o r re ct 
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It wa thought to fee 



advisable to pick a period of tea days *4 lrt ‘- k . 

u*. 

• 4 ft 4 T* f' r ' *- 

la which ecnsldaxahle traffic wa available, sod sake an attempt 4^ fr »-. 

by statistical aeaas to determine the length of the keying cycle ^ 

Bimiied to the tso seouasces. ^ <L^. i , 

k i iVu>» rt>A fa Xuw 
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expected terngmscgr of occu rr enc e in Apeneae telegraphic text, the 



percentage for these six corres ponded elsost exactly with the 



firaa ea actual count of their 



in the 



observation led at once to 



conclmlflBi that the 



cipher anchlne ws essentially the ease as that used la 
1933, sad that the eix vowels were replaced by a aixture of 



of the alphabet. The tpeetlea then arose: "Can the aethod used 

for the reconstruction of the vowel sequence for the Mes s a g e of 
Dcceafcar 21, 1933 It applied to reconstruct the eoaerespondlng 

sequence of eix letters used in the period of Peceaher 11 to 

1936 

December 207” Xnasauch as these six letters of high frequency 

A 

of occu rre nce la the cipher text far this period «ere the letters 
B, S, 1, H, 0, and X, It vas thought that the efcametsrtstie 
tenden cy of the letter "0* to occur as a plain text deriblet 
night pendt the use of tha aethod vlth sene success* tts aethod 
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-*>> -J ^.via 



while net all the am 

^1 a na.*Ci<> 



ia the period under s tagy could bo 



to foil into 



of the 



cate g ories without such fseetiou* When tabulations 



the heels of interval 1-2 for each category, the 



e t r u cte d were Identical, text osae wee the 



<irf4 wiW irf ja j p— '-x i 'f " g pmgwj h| thus 



of the other as 






observation that a 



had been 



I n corpor a ted ia the aachlne la Its co ns tr uct ion. 



Up to this point nothing had bscn dis cov ere d which tended 



to disclose any does as to the length of the keying cycle. In 



discussing the results of our studies with lieutenant Meager* 



of the Sony Code and Signal Section, Mr. Frlednea wee advised 



by hln to aske a study of the 



on the ssswoption 



that the basic keying cycle wee a result of superimposing a 






wheel sdadlar to that of the Sryha on the two eh 



REF ID : A67330 



* be thought^ that the MglotHe Bat night nee asixilar 



• Shis Bevy machine van built around a 






of *7 



teeth* oa idiiefc warn teeth am inoperative* end which 

jr 

Jaap or skip in the order of alphabet stepping which ren noraally* 



tfCufU 

Imr of thi 



£r 



each wa clphe raeat of a plain-text 



letter* Ore* two, or three teeth haft been foua& to be emitted, 



and the resultant juap or ifclp corresponding thereto consisted of 



one* too* or three letters in the alphabet 



* Also* in 



the too sentences would be ueed in one direction 



sad in others it would be retereedj K. +tj ~- CA -'- a ~- •*** 

6*-^ljSrfW — ’Xfctf' i. ffctil r 

Accordingly* it ves concluded that separate coincidence tests 



ought to be node for the six letters and for the twenty letters* 



Baaed on the product of each the metiers from 30 up to 47 with six 



and with twenty* the total length of the keying eyele for each. 



Since 31 x 6 x SO given a product aval to 3*720* and since we bad 



nf even half that Mstha eaeh a coincidence test 



* if only the letters in the six 



ircjir 



•*a&A lii^easi 



11 

i— r 
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A 



- jl O. 



product of 47 and 6, or 262 With this la wind, the 



of 6 with each of the a dh er e ft roe 31 to 47 nxe safe, co n s i d er ing 



anly the VOW*lS in OUT COffljtS. B» greatest mrihST Of COttOtO UBS 
Obtained for the interval 1 - 259, did indicated that the teeafc- 



vbcel had 43 efffcetlne teeth* 



Insofar as the Message of December 21, 1933 eee c oncerned, as 
aw fairly pcdLtdwe that it was p re p a red by aeons of a cipher Machine 



possessing the foUonlag characteristics: 



1* The ancMm nae sla»«r to the Kryha in ope r a t ion, 

2* Instead of one aequeneft of twenty-six letters ee in 
the Kryha, too sequences, one of twenty consonants end 



the other of six -vowels 




°g JU ' 

wet rtiy had >3 



W«fc-0 



-U3**. AX* ^ * rf , . / 

-K U Auoy.e ,4 *; 

»-+ -88> **■ 

TnsLG&&s>~r "• ~^4 
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The last two points noted aborts led to tbs fallowing proposition 
which could readily be tested: Gao the order of the plain c omponent for 
the vowel sequence be confirmed and i nf orm a tion on the stepping cycle 
ascertained by attempting to decipher the vowels, seeming (1) an 
effective cycle of %3 characters and (2) identical sentences for the 
plain and cipher components of the vowels? Since the plain-text vowel 
combinations yuu and 100 wore of high expectancy in Japanese plain-text, 
these combinations must be represented by certain of the three-vowel 
combinations appearing In the cipher text. Also, if the action of the 
cipher machine was similar to the KTyha, when the message was written 
on a width of h3 characters, the effect of the motor wheel would be 
progressively constant down each column with a corre s ponding constant 
columnar displacement or stepping of the alphabets* Accordingly, the 
first step in performing the test was to write the message on a width 
of b3 characters and to look for favorable spots to check the three- 
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A voric sheet on the width ^3 «u pre pa red (See Fig. ) and it 
wee noted that In the laat three eol tarns (coiioms kl, k2, end 43) two 
sets of three cipher-tact vowel confeimtians appe ar ed. The eoafclnatlon 
OOI was found In line l£ and the cotfbl nation 000 at line 36. These 



ware considered particularly favorable since by Inspection It was 
noted that the lest two letters of each* Of and 00, were sequent letters 
In the sequence MXtSJX which resulted from the interval studies noted 



above. Also both corabinationa of cipher began with the letter 0, 



which it wee hoped would repreaeot plain-text 7. It wee easy to test 



these possibilities by simply completing the cipher component and 



determining If the plain-text combinations 1 TO and TOO could be logicall y 



derived. The results of this test are shown below: 



Line 28 0 0 7 

7 7 1 
III 
EBA 
A A 0 
09 0 

0 opr 
xTr x 

1 2 x 

« I A 
A A 0 
900 



Line 36 



1U 
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Xt was moat encouraging (in fact, it wa one of those rare exciting 
rodents in a cryptanalyses life) to note that both plain-text possibilities 
YOG and YUU underlined above resulted from a single step-by-step pro- 
gression in identical positions from lines separated Toy a multiple of 
6 (36 - lB « lB) . Obviously, the next step vas to extend the test 
beyond these three columns in both directions,, to see if further ensouraging 
evidence could be found. A section of cipher teat of line 13 and that 
portion of line 19 which followed, vas selected because this part of the 
text contained a large number of vowels. Bte results ere Shown below: 



15 
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Sue underlining above Indicate* -the pattern of a single step-by-step 
advancement of the vowel cipher component on each side of the plain-text 
TOO noted above* The letters from row IB b et ween columns 32 and 43 
looked very good ae plain-text; likewise those of line 19 from columns 
1 through 7 deemed very favorable, While the letters preceding column 
32 were not very encouraging* it was concluded that it might be expecting 
too much to hope that the simple step-by-step pattern extended without 
interruption over so great a stretch of cipher text. 

The results of the foregoing test, while not contradictory, were 
still not conclusive, and additional testing was needed. Accordingly, 
it was decided to examine other sections of the cipher text using 
the same technique. It was noted that, in colxuus 2, 3, and 4, there 
were two combinations of three vowels, KU in line & and SIX in line SO, 
similar in pattern to those found in columns 4l, 42, and 43, These 
ccuabinatlons appeared on lines also separated by a multiple of 12 
(20 -8*1 2) . She test far these combinations follows: 
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2 3 t 



23^ 



Line 8 



XI A 

AAV 
U U 0 

0 off 



£Tx 

I I s 

B B A 
AAV 

WO 

0 0 Y 
TYI 

1 I B 



Unt 20 BIB 
ABA 

UAU 

o u[5 
YlffY 
7 y i 
BIB 
ABA 
UAU 
0 U 0 
TOY 
IT I 



Tentative TOO Y U U 

Plain-Text 



The appearance of 100 and YOU in related poeltiona added ease 



Wight to the validity of the results obtained up to this point, and 



it was concluded that ae the next atep efforts should he node to relate 



the overlapping texts of lines lQ and 19 with a -view to ascertaining 



the columnar displacement of the vowel sequence. 



The following Modified Vigsnere 



square was used as a basis for 



ascribing the alphabetic designation to the tentative plain-text: 



Cipher 

Alphabet 1 
2 

3 

k 

5 

6 



The results of the application 



AVOYIX 

A U 0 Y X B 

XAUOYX 

X B A U 0 Y plain 

YIIAVO 

OYXIAU 

UOYXBA 



this square to the texts of lines 



13-19 sod lines 19 - SO are as follows: 
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Column # 3* 35 36 37 3039*0 41*3*3 1*3*56739 *8 111213 

Lines 16-13 A U L A A C X 0 0 H001XBTX0 QI H 0 

tentative Plain 0 0 - S X - A X 0 0-SX-X-U-- - X - A 

fowl Alphabet # 56123*36X23*36123*56X23 

Lines 19-98 HAVOCAZBAUTXXBBUFSXUDXL 

Y 0 V 



J‘s , 

TIm i fTn in aim T led to the conclusion that the relative columnar 



i 

i 



displacement vas a multiple of sinless oxer mad it mas quite possible 
that this displacement resulted firam the application of a *7-tooth 
eheel to the alphabetic sequence. Xf such were Indeed the case, 
then it appeared that all the vowels in col ram 3* through column 
* Inclusive could he reduced to plain-test, aaaramlng of course the 



stepping pattern to he constant through these columns. Obviously, 

/Ul , l _- JUXS^, 

the next step ves to apply the alphabetic designations to these columns 

** - va Lv- 

of the wort Chest and derive the plain-test of the vowels, the remits 






She plain text results for the vowels 



most satisfactory; 



however, the gsitlm of vhat to do shout the cons o na n ts still bed 

IS 
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to be answered* After giving sane thought ms to the desirability of 
continuing merit on the vowels, it me concluded that eoooer or later 
the work on tbe eounoaaata n ee ded to be done* Also, it m thought 
that If tbe Machine utilised a single aster wheel ddett mm applied 
to two sequences, one for tbe vowels end tbe other for the consonants, 
it would be po s si ble to project its effect to tbs oonsonsats end test 
the results statistically . If a b7 tooth notar wheel was used and it 
caused a single step displacement of tbe consonant sequence far each 
letter enciphered, its effect would be to displace tbe sequences a 
total of 47 steps be tween adjacent letters reading down tbe column of 

the work Sheet of Figure . Accordingly, starting arbitrarily with 

eiqr given letter of tbe section b et we en column 3 b through co&una 7 
Inc lusive, it would bo possible to ascribe each of the consonants of 
this section to of t e o n t a r alnhabets* 

XT the foregoing aaswgtions vers co rre c t, the freqpenay of 
occ u rrence of a given cipher letter in each of tbe twenty positions 
would ctfisreepood to tbe plain-text expectancy of the letter it re p re- 
seated in each alphabet. 
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It would therefore be possible to recover the c o nso n a n t se<juence 
by tabulating the occurrences of each cipher better In each of the 
twenty alphabets and matching these distributions against each other* 



